cf-key -s has its special sig handler but the other operations need one too