A bug report from Tom Harrington (via Michael Tsai): Code Signing Is Flaky and Unreliable
I’m not sure flaky and unreliable is quite how I’d describe it.
I’d describe it as: unnecessarily complex, overly bureaucratic, badly supported, incompletely documented and subject to random change at any point without notice.
Other than that, it’s really good.