Does Contact Level Security affect Signature Rules?

When setting up the sales user in and instance using CLS, do you need to add the security groups to the user or will just adding SALE allow them to have a signature applied if the field value matches?