feat(security): allow signing for an account or user instead of just a wrap