Wow. Seems like commits made through the UI should just be unsigned. If you need signatures, you have to step outside of the sandbox.