Re: signing/verifying applications