first cut at repurposing the app signing script from http://mxr.mozilla.org/mozilla-b2g26_v1_2/source/security/manager/ssl/tests/unit/test_signed_apps/sign_b2g_app.py