So there's a manual step at this point, that I'd love to fix by adding cmake logic to do the signature after the build, but I don't really know where in cmake to put that logic