ad-hoc signed (not trusted by Gatekeeper)