check_sig_alg_match(): weaken sig nid comparison to allow RSA{,PSS} key verify RSA-PSS