signfile: allow extracting public key without signing a file