V01-07-17: fix the build system to use a CERN-issed code-signing certificate