Sign with PKCS file instead of raw key/cert