if let Some((pk, signature)) = sign_hash(&mut key_path, hash).await? {
                    let sig = toml::Value::try_from(vec![Signature {
                        public_key: pk,
                        timestamp: change.header.timestamp,
                        signature,
                    }])?;
                    let mut toml = toml::map::Map::new();
                    toml.insert("signatures".to_string(), sig);
                    change.unhashed = Some(toml.into());
                    let hash2 = repo.changes.save_change(&change).unwrap();
                    assert_eq!(hash2, hash);

                match sign_hash(&mut key_path, hash).await? {
                    Some((pk, signature)) if !signature.is_empty() => {
                        let sig = toml::Value::try_from(vec![Signature {
                            public_key: pk,
                            timestamp: change.header.timestamp,
                            signature,
                        }])?;
                        let mut toml = toml::map::Map::new();
                        toml.insert("signatures".to_string(), sig);
                        change.unhashed = Some(toml.into());
                        let hash2 = repo.changes.save_change(&change).unwrap();
                        assert_eq!(hash2, hash);
                    }
                    _ => {
                        bail!("Could not sign the change");
                    }