adding option to supply a signing key for the packages