Yeah the output `e` would be a scalar. But when it is multiplied with the issuer_public_key point, would the resulting `contract_point` not be a valid elliptic curve point?
Imagine that e is 0.
Yeah ok, barring the exceptional case that the hash of the metadata comes to zero but that seems pretty unlikely
