[exim] Rejecting based on domain keys

If a domain has a policy of signsall=1 and there is no signature - is
that good enough to reject the email?

If a message is signed but result is badsig - can I reject it?