I think that would be more analogous to receiving a message, parsing it, then realising the payload is another signed message, and then validating that. Depend

I think that would be more analogous to receiving a message, parsing it, then realising the payload is another signed message, and then validating that. Depending on the situation, signing the container might not even be necessary, much like a zip file without a password that only contains encrypted contents anyway.