xpi: make TestVerifyCOSESignaturesErrs work with both go 1.10 and 1.11
xpi: make TestVerifyCOSESignaturesErrs work with both go 1.10 and 1.11

mozilla-services/autograph,mozilla-services/autograph,mozilla-services/autograph