factor out signing of records
Sign additional section.

Add sigs to the additional section and test for it.