If we're going to do the signing in a separate process the jars will end up with two signatures (jarsign doesn't remove an existing one).

`webstart-sign` was only called from `release-webstart`, so I don't think `release-all` needs changing.