A workaround could be to explicitly specify "CODE_SIGNING_ALLOWED": "NO" for resource bundle targets' build settings.