publish requires signing