misc: expand allow-list, apply signing plugin only when required

misc: expand allow-list, apply signing plugin only when required #131