Locking signet and curb-fu version to avoid dep issues.