Disable storing signatures during repo mirroring

What problem/issue/behavior are you having trouble with? What do you expect to see?
I have setup mirroring of a repo and that has worked fine with 3.5.1. After the upgrade to 3.5.2 mirroring no longer works

Logs from quay console:

Mirror of 5-41 failure to repository redis/redis-5-rhel7 Source 'docker://

registry.redhat.io/rhscl/redis-5-rhel7:5-41

' failed to sync
Getting image list signatures
Copying 3 of 3 images in list
Copying image sha256:bb1470a0f87e053026e2fefb2583594d3821aea4ecce858e3db70f8a5e8cb9b7 (1/3)
Getting image source signatures
Checking if image destination supports signatures
Copying blob sha256:70d8ae8bb48eb4313de66e13b93ab02b1f12073961a32e6e5b957228ac52ca44
Copying blob sha256:608083cad0129a0f9240e5dcd4ceb087cc5ff025012277fc28bd77108e11a9bd
Copying blob sha256:b77f42d650dc7d0d6fa21f8661f03957cfe70fcf92e48245d2a7cad7d795eb56
Copying blob sha256:a858833a9239708c0c07c8fdf95218065c0605e14950051b009f9ad263f43511
Copying config sha256:327ee2d8ff6817033d952540e054c419601dba151dff76c11b597cb89106d6f6
Writing manifest to image destination
Storing signatures
time="2021-06-15T14:16:09Z" level=fatal msg="Error writing signatures: mkdir /var/lib/containers/sigstore/redis: permission denied"

I also tested with registry.redhat.io/rhel8/redis-6:1-* and got the same error.

Where are you experiencing the behavior? What environment?
test, quay (and mirror) runs as a podman container on rhel8 according official docs

When does the behavior occur? Frequency? Repeatedly? At certain times?
always with 3.5.2
never with 3.5.1

What information can you provide around timeframes and the business impact?
none, workaround is to no upgrade for now