disable jar signing for now