sign_statement: Remove unused variable 'key'.
Add pyXMLSecurity backend for signing/verifying.

It remains a TODO to make it possible to choose backend
through configuration.