use perl APIs for signing, rather than makerpm.sh