Make signing optional

[tomwetjens]

In our organisation, anti-tampering is not a hard requirement and authentication is done using OAuth2. So for us, signing is not needed and is seen as a barrier to entry.

We should brainstorm what it would mean if we make signing optional.