You're right.  The legacy CLI has this option and originally I was going to duplicate it but it just seems so unlikely that someone would want to provide their own signature of the policy file that I removed the option and just always compute the signature.  I'll update the help text.