We need to be able to sign the input URL hash so we can verify the example comes from a trusted source, and its safe to run it right ahead.