disabling sigs until we do it for the platform (and aren't using a stupid cert).