actions: sign+encrypt