I forgot to mention in the article that the official reason I was given is that the "Sign in" functionality requires generating the same certificates used to si

I forgot to mention in the article that the official reason I was given is that the "Sign in" functionality requires generating the same certificates used to sign an app, therefore, the the cannot be separated.