Chomp at the source instead of all over.

Copious debug logging of signing process to track down an issue.

Make it explicit that digester resolution returns a new instance.