See commit 08b53cb3. A signature-certificate-file configuration that is not used elsewhere is confusing.