Exclude manifest signatures from third-party deps since it will break sh...

...aded jars in some cases