knowing unsigned code is on a machine is one thing, stopping it from running is another