Signed endorsing tokens sign the entire ds:Signature element produced from the message signature and
are themselves signed by that message signature, that is both tokens (the token used for the message
signature and the signed endorsing token) sign each other.