Apply code_signing overwrites after every call to "gclient runhooks"; only actually prompt user once