Merge "Signature.verify should not throw if called twice"