Hide packaged firmware AU signing behind a flag for now.

scripts/image_signing/sign_official_build.sh

Index: scripts/image_signing/sign_official_build.sh
diff --git a/scripts/image_signing/sign_official_build.sh b/scripts/image_signing/sign_official_build.sh
index 143d945acdbf61f35550bf61e729e33e98f50a27..628de44c6987242429c7d90131a6e0fb3fca5d2e 100755
--- a/scripts/image_signing/sign_official_build.sh
+++ b/scripts/image_signing/sign_official_build.sh
@@ -38,6 +38,12 @@ fi
 # Abort on errors.
 set -e
 
+# Make sure the tools we need are available.
+for prereqs in gbb_utility vbutil_kernel cgpt dump_kernel_config verity; do
+  type -P "${prereqs}" &>/dev/null || \
+    { echo "${prereqs} tool not found."; exit 1; }
+done
+
 TYPE=$1
 INPUT_IMAGE=$2
 KEY_DIR=$3
@@ -205,7 +211,9 @@ sign_for_factory_install() {
   echo "Output signed factory install image to ${OUTPUT_IMAGE}"
 }
 
-if [ ! "${FW_NOUPDATE}" == "1" ]; then
+# Firmware payload signing hidden behind a flag until it actually makes
+# it into the image.
+if [ ! "${FW_UPDATE}" == "1" ]; then
   resign_firmware_payload ${INPUT_IMAGE}
 fi