Stick with unsigned JAR for now