Sign package if missing in mini-manifest (bug 1035463)

@ngokevin I updated the comment. The calling of this via a task means we can't do some checks that are important, specifically checking if the user is the owner of this app and letting them have access.