Add a sigalg test to check we only allow sigalgs we sent