pki: Optionally generate RSA/PSS signatures