Add shim-signed to baseline