disable signing if no sonatype credentials have been specified (works now)