Only sign when uploading, include sonatype auth when present.