Right now signing requires a public key stored in plaintext. This obviously isn't the best from a security perspective. RPC servers like Parity and Geth support signing messages, so we should have an option to delegate signing of messages to those tools.