Maybe avoid signing anything if it's already signed? I heard that in the future, PTF repos will be published directly by us, and so would already be signed.