use --no-strict option for codesign verify