What is the minimum level of permission that is required to effectively determine if an object is signed using sys.crypt_properties?

I am signing stored procedures using certificates.

Inside the stored procedure what is the minimum requirement needed to determine whether the the running module is signed.

If not signed, I would like to quickly show an error message and exit the module or SP.

The same question asked a different way:-

execute as user='lowprivilege'

select *

from sys.crypt_properties

revert;

will return an empty record set for a low privilege user;