osxpkg: sign with generic/correct/accepted key