I'm another confused person and it's only getting worse. I have read a
lot of posts on this topic, including an example from @Renaissance and
one from @jasoncoe2 that says the signature key should precede the
^-separated fields to hash, and tried man...