Blocking on bug 1488390, which at least partially tracks the convergence to generic-worker. If we need to implement this before docker-worker retires, we'll also need bugs to track the work to add ecdsa support and cot verification to docker-worker. In that case, we'll end up with 3 implementations of cot verification: node for docker-worker, golang for generic-worker, and py3 for scriptworker.