Fix sign-save-on-top

The 'old way' of signing did a save-to-new-file; move in place. Let the new way do the same. Code conceptually lifted out from PDFGenerator::sign