verify
fun verify(publicKey: ByteArray, request: ServerRequest, authentication: RequestAuthentication): Boolean
true if authentication is a valid signature over request by the holder of publicKey. Checks the signature only: time window and nonce reuse are the server's job. Malformed keys, signatures and requests give false.