jarsigning only during release