Thanks your speculation was very insightful, and points the way towards an easier workaround: sudo codesign --force --sign -  /Applications/Eclipse.app