only sign archives if keyId is set or not empty