I've had it go both ways. I've found it easier in the past if someone already compromised security by disabling signing. But that was a long time ago in another life. Things have probably changed a lot since.