unexec: enable code-signing
generate correctly formed executables if compiled with recent XCode