to a proper digital signature using the new priv/pub key pair recently
installed (and the mksig script). The key pair is password protected,
so it is not as convenient as an MD5, but such is life. The sig is
returned as an https:// URL to be downloaded with wget and verified
using the public key stored on the CD in /etc/emulab_pubkey.pem.