don't sign archives if it's not a release build