Do a signing run at startup.

This makes sure that we do not serve invalid empty tree heads (fixing
issue #143), as a side-effect.