Sign artifacts in verify; deploy does not do it.