To be honest, I thought that was a no-go, that it needed to be a privileged signature by Mozilla. I was half right, half wrong. It's amazing how many options there are.