sign just once at the end
keep the intermediate files around