use recommended code signing setup