this time learned - need to have tag and version for the return data - i think i need to sign the hash of the transaction rather than the transaction