Merge pull request #10 from srowen/master

Exclude manifest signatures from third-party deps since it will break sh...