copy tempfiles instead of trying to move them.
use filename instead of open file for signing output due to
signing-clients limitation.