normlizing on the mac will now add the sha256: prefix that apparently is the default on win*
default is to sign on both mac and win*