adds colormatch.sign permission