Custom notes can read credentials though, so a custom node could be made to securely read and create the signature.
Kind of like how the JWT node works, I’m surprised that’s not supported by the crypto node yet, seems like a no-brainer that keeping some of those fields private/secure will be a priority.