setting unsigned policy to always allow unsigned jars to be updated