Signature algorithms not using an MD weren't checked that they're
allowed by the security level.
Reviewed-by: NTomáš Mráz <tmraz@fedoraproject.org>
GH: #11062