add cmdline-signer to sources properly