But why does it matter, whatever is the serialized JSON which is signed is what should be regarded as the "true" value, also post deserialization why does it matter if there is a difference in the order. The protocol itself doesn't provide any guarantees nor should it look to provide any guarantees post deserialization?