what’s the easiest/best way to generate a nsec/npub and perform basic signing operations from a CLI?