ARC: log signing-spec errors in mainlog only, not paniclog