sig the jars just for release - a workaround for travis to avoid signing there
use a bit more realisitc values