signing a package without logging in to the GUI