ca-sign: Add usage statement and more thorough param-checking