.sign - how about signing all files, especially patches