Comment by cryptonector

The signature validation could be moved into an unprivileged process forked from that one.