They seemed to use to work great any time I tried them, but now when I try them it either fails or seems to recover a different pubkey than mine (which is indistinguishable from an invalid signature). I don't see anything that changed in our code so maybe something changed elsewhere or we're buggy for some messages?