Modify CR protocol: sign nonces with signing keys instead of encrypting them

In part II (Content CR) of CR protocol, we currently generate a nonce per signing key in DID document and encrypt it with the corresponding key. We want to change that to signing they nonce instead of encrypting it. 