read signing config from environment