Sign only the jars we generate