Hardware security modules sign unauthorized transactions if the internal server commanding the hardware security module is compromised