* Get rid of RVM
* Tell sign_tool to pick the certificate that's valid for the longest time