allow thin manifest & git signing