signed dmg and binary 2