only sign the files that were changed in the last 2 hours

Signed-off-by: Jessica Frazelle <acidburn@docker.com>