ssh signing: tests for logs, tags & push certs