there is a

CPACK_PRODUCTBUILD_KEYCHAIN_PATH

and

CPACK_PRODUCTBUILD_IDENTITY_NAME

in CMake docs, but I dont think we specify it anywhere