add mvn voodoo for signing artifacts