API. Add user confirmation to `sign_message`

[anatolse]

In the current version, we silently sign the user's message, this is not good from the perspective of security