libcli/raw: give the caller the chance to do the signing checks on its own.