First attempt at moving signing on to the build master to catch the Mac standalone build.
Nope, we still need the keys on the debian host to sign the debian package.
Some exceptionally hard-won fixes. The build works now.
Merged bug25533