need to sign jars during the release process