ca-sign: Verify cert request before acting on it.