Just following up on the codesigning issue: the same thing happens if an applet has an embedded script library.
Bottom line seems to be that if an applet contains any embedded scripts, you need to remove extended attributes on them before you can sign the applet. Using xattr -rc on the /Contents/Resource/ folder is probably the easiest solution.