refactor signing, preserve Auto-Submitted header

- we do not use the input message directly for signing but instead start with a
  clean part.
0.1.5