Sign jars with new signature

They're timestamp signed, too.