How can I require a digital signature of the user in a Task?
This is something your client application should take care of. jBPM is not concerned with authentication. It merely uses a string to identify the current user and leaves everything else to the client application.
Regards,
Koen