Use sign_statement() instead of sign_statement_using_xmlsec().