If the node which may sign the next block is determined by the network before it's signed, how to handle the cases where

* node with signing privilege refuses to sign, or

* signing node is attacked in order to prevent signing?