swanctl: Document signature scheme constraints