container signing utility
