another take on no code signing