note: newer versions of pyinstaller (4.4+ ?) want to sign the bundle themselves, in which case modifying the Info.plist file after pyinstaller returns invalidates the sig.