MSI sections actually need to be signed after all