first pass at pkcs7 signing