add capabilities and sign package