the permitted signature algorithms for server and client authentication
are the same but it is now possible to set different algorithms for client
authentication only.