More natural to use ClasspathEntry than URL in the configuring/using/checking signatures.