MESSAGE_SIGNATURE
if (signature != MESSAGE_SIGNATURE) {
k5_buf_add_uint64_le(&ctx->negoex_transcript, MESSAGE_SIGNATURE);