I suppose the signed one will the default (without any suffix), but it
is not available yet from Jessie backports.

It's worth noting that the linux-image-amd64 package is not satisfied by
the -unsigned packages yet, so we have to explicitly install the exact
image version we want.