Allow external specification of whether to sign packages