some endpoint protection services will block anything not signed by a trusted signature or that doesn't match an allow-list of known-good file hashes