Previous versions of v3.public contained high values for S in the (R, S) encoding.

While this is fine for most cases, there are some ECDSA implementations that only permit low-S values. Thus, for compatibility, we now only provide low-S test vectors for valid tokens.