adding kSecCSCheckNestedCode to code signing check flags