Apparently our override of the code signing setting applies to alltargets, even though we don't want one to be signed cuz it has no output.