We should enable FEATURES=binpkg-request-signature by default when everything is ready. We're not there yet, I'm just filing this to keep track and split it out from bug 930730.