we sign it before it becomes public (`current_version`)?