#6267: sign ostree commits