s4:selftest: add tests with seal and sign for backupkey