Update signed-tar specs to use php fingerprint.