don't include signature in Incident creation

Incident is *internal*, so it might be good to not include signature.
we can add an option later if it's arguable for flexibility.