Pad signatures everywhere /except/ -h.

If you run -h, you may be using that hash in a db/dbx variable, in which
case the padding isn't appropriate.  Everywhere else, it's for
implanting at some stage.

Signed-off-by: Peter Jones <pjones@redhat.com>