merge patches for signing ostree refs