Puzzles about ExecCommand function in client/client_gorums.pb.go

[seafooler]

As commented by the function:

ExecCommand sends a command to all replicas and waits for valid signatures
from f+1 replicas

However, the HotStuff paper argues that 2f+1 signatures are needed.
What's the reason for this inconsistency?