I've committed some new signing code to pkg_add/pkg_create, that can make use of the new signify(1) command tedu wrote.
You can play with it, but don't rely on... about anything. Things may still change a great deal. Make sure to update libc, signify(1) relies on b64 working correctly.