To be able to automatically sign a release of the installation media, we require a signing enclave to which we can hand the artifacts to be signed. As the best intermediate solution before having a signing enclave, we can automatically create periodic releases and promote a release by extending its assets with detached signatures for bootstrap and iso images and all iPXE binaries.