test artifact signing