make unsigned apks explicit

Allow user to explicitly specify that an apk is not to be
re-signed. Fail if we have any apks that for which no key is provided.