cf-key -s has its special sig handler but the other operations need one too

(cherry picked from commit 11d058f86682aff4e0a855e86d37947e6f4b371c)