In fact, Apple has reported security issues when signing badges on iOS. This is because certificates must be packaged with the application. And you do not want to provide certificates to such users.
Like WDUK, use a simple server to sign and distribute a proxy server from which your application can request a pass. This is also very useful if you want to update gaps added to devices.
I'm sure you can find a server implementation that fits your needs on GitHub .
ptz0n source share