With the current SB, changing these options works for me when signing the installer after it has been created: