all application restrictions are based on the application vendor digital signature