We should apply the same optimizations we did to the metallb dockerfile and sign images on release, as we do with metallb