Better handling for unapproved apps and dealing with non-RSA signing attempts