sh4d0wup: Signing-key abuse and update exploitation framework