check for credential-less characters

Ideally this will be rolled into key deletion.
revert unused changes to signal.py
Merge branch 'develop' into refresh-script
Fix missing import (what noob)
Merge branch 'refresh-script' into deploy