http signatures: cache things we've already signed