Treat all failures from EVP_DigestVerify() as a bad signature