sign jar at the verify phase
1 file changed