Clarify which signature to check when decrypting `m.olm.v1.curve25519-aes-sha2` messages.