caller app is identified and user is prompted to authorize signing for that app