Switch to sh when calling debsign to ensure we raise an exception on failure