When we copy shared libraries to $PREFIX/lib on systems like iOS or tvOS, we should codesign them at copy time. Otherwise the loader will cowardly refuse to load them. Initially, we can provide the ad hoc signing key, but we should provide customization points to allow injection of real signing material.