The security of SSH client signatures