Bug 1080735: add opsec to access on signing machines