fix(sign): refuse to create signatures or verifiers with empty keyring