transport-helper: add 'signed-tags' capability