signed dmg and binary