Use ossligncode's -readpass option

I think we should switch to osslsigncode's -readpass option to have a better setup when dealing with our passphrase for access to our signing key.