bin/sign: Read fingerprint from master rather than publish directory.