All other remaining webstart code-signing changes (rebased onto develop)

This is a combination of gh-2193 gh-2241 gh-2271 rebased onto develop.
i.e. all of the remaioning webstart code-signing PRs