Sign the dmg, too