when we move to a new signing process

there's nothing to be done now (or soon), but we should track this