add explitic specification of the keychain on signing. Setting the default keychain in the build script is insufficient apparently