option to skip gpg signature (--dont-sign)

For testing purpose, we might want to skip signing entirely. For example
when we dont have our GPG key on the developement computer.

--dont-sign will skip gpg entirely.

Change-Id: I8b3ae792add749f9726a15745dd5d1d2c1829910