define signature-certificate-list in stack/slapos.cfg only.
cleanup [versions].