signed object fetches
This is part 3 of 'secure mode' interoperability.
If the [:activitypub, :sign_object_fetches]
configuration node is enabled, then object fetches will be signed with HTTP signatures using the internal fetch actor.
Verified working against Mastodon.