Currently there are 2 code paths to sign a tx:
- using
config::sign_with::Args.sign_tx_env which gets a Secret from locator.get_secret_key, and then gets the signer using secret.signer(). This path works for secure store, because it isn't trying to reveal the secret key.
- using
config::Args.sign / config::Args.sign_with_local_key
It will be easier to maintain this if there is only one path for signing, so that's what this issue is for.