add proof-of-conept 'application signing'