Implement proper package signing