8.0 packaging debian sign aab

Would using scriptlets work instead of hardcoding the path here? I don't know how distutils generates its spec files, but if it's trivial textual injection it might just work