trunion api (bugs 1070189, 1070191)

WIP, DO NOT MERGE

Bug 1070189: Call the trunion API (not tested with servers yet)
Bug 1070191: Signing management command
Wouldn't it become quite unreadable with a big try... finally in _sign_addon()