Apply pubkey and signature constraints in vici plugin