When you sign an active-x control where is the signature kept (header added?? or what) and in what form (binary hash, asc??)