kbuild: sign the modules at install time