Add comments, in uppir_vendor, private_key is read from a file and rsa object to sign is created outside hundler.