pub fn sign_desired(key: &SigningKey, bytes: &[u8]) -> String
Sign a desired-state document (for tests and the gym; Phase A has no producer).