fmt-merge-msg: prevent use-after-free with signed tags