modsign: Handle signing key in source tree