Setup a machine to sign builds.
More info at https://gitlab.com/calyxos/calyxos/wikis/Offline-signing