Quoted variables passed for do_sign

Spaces in variables may cause issue for certname and crossign path.
Quoted them for safety.

Addresses OpenXT/openxt#33