pub fn verify_signature(secret: &str, body: &[u8], header: &str) -> bool
Checks a signature header in constant time (what a receiver does).