codesigning a component package