dpb no longer does. Use pkg_sign(1) directly like sthen says. Before, signing directly during pkg_create(1) made some sense, since the archive was built just once with the signature inside.
Now that the signature is outside, there is no gain to having pkg_create(1) sign directly, so that was scraped out.

