refactor: share code between verifier and signature scoping

[edmundnoble]

PR checklist:

• [x] Test coverage for the proposed changes

Additionally, please justify why you should or should not do the following:

• [x] Confirm replay/back compat - did a replay

[edmundnoble]

Not going in this release it seems, just being conservative.