Only sign kexts when not already signed or not passing validation
Avoid rsync --delete since it's not needed here
Make sure the output packages are owned by the user not root