ensure a signed/ subdir exists