only sign archive if we're attempting to upload