Changes to accommodate that Auth now takes a private key.

gosign/auth.Auth now records the private key rather than the key file name.
Also add extra error checking.