convert extractManifest to a task
rename DontExportCertifiedApps to CertifiedAppExportForbidden
do unconditional work unconditionally
todo: stop accessing internal methods of other objects
use finally block to avoid rethrowing error
only try to remove app dir if it exists; close ZIP reader if we were able to open it