Avoid a bunch of copying/conversion in script/sign
Merge remote-tracking branch 'origin/pr/5210' into reducedeps12
script: move other flags into (future) external api