It seems like signing DMG's is a requirement for Homebrew these days, and it might also be necessary for ARM Mac's - which we also need to build for. For more information about the Homebrew side, #178 can be referenced. For the thoughts on signing, #703 and #241 are useful.