Resign: preserve entitlements to avoid having to specify path

This also preserves rules and requirements