Sign artifact only when deploying, not when installing

Fixes issue #11