resign: no need to pass --resource-rules paramters since it's preserved