Proper codesign path for OS X firewall