This should ensure that they're not recopied if unchanged, because the
destination will be newer if they changed due to code-signing.