signing operation moved to service