deployment uses signed jars