The spec defines an Agreement as follows: A concrete Policy associated with a specific Dataset that has been signed by both the Provider and Consumer. There are no other mentions of signatures or other cryptographic primitives. How is the consumer supposed to prove that an agreement has been reached with a provider?