DSA verification should insist that r and s are in the allowed range.