You need to sign it - this functionality is built into TrustVault.

Did this answer your question?