Use developer ID certificate for signing.
Fixes #22

Won't take effect till @gertig updates the api application on the live server.