Enable code signing and sandboxing

For an app like this, sandboxing works incredibly well. Although I'm
not quite sure whether it helps any, given that there aren't a lot of
attack surfaces to begin with.