I'm trying to sign (using codesign) an app (http://dl.nwjs.io/v0.12.3/nwjs-macappstore-v0.12.3-osx-x64.zip) for the Mac App Store that hasn't been singed yet. The main app (nwjs.app) isn't signed but the Helpers seem to get signed at some point on my system with "Signature=adhoc" before I'm able to sign them myself. Because of this I have to use the --force flag with the codesign command. I've read that if Parental Controls are enabled or certain options are enabled in the filewall, that the OS could add the adhoc signature. However, I'm admin so Parental Controls are not enabled and I've disable the firewall entirelly, but the adhoc sig is still being added to the Helpers; and again, only to the Helpers and not the main app (nwjs.app) itself.
Does anyone have an idea why this is happeing? Or can someone point me to a doc that has a complete list of the facilites that will try to sign an app that is not already signed?
Thanks.