Currently packages are stored manually after signing on kojipkgs to avoid mash failing getting the RPMs. For this the autosigner needs to make koji write out RPMs, even if the RPM is not used by mash, e.g. when there are multiple builds per day. Also it is not possible to download old signed RPMs, because only the unsigned RPMs and the signatures are stored. A simple script could make sure that signed RPMs are created on-demand if required, addressing both issues.