While opaque signing is more robust, users will expect clearsign in the padwidget. This is also similar to what GPA does.
