don't require code signing for non-release builds