Don't use blinding when signing the policy

Blinding is used to prevent side channel attacks but this is hardly an issue when signing URLs. Since SignPKCS1v15() is basically RSA decrypt, the random reader can be nil to prevent blinding.

This speeds up the signature generation by about one third.