Oh, and the copy is only needed if you ship on a (read-only) dmg. If you package it in a zip instead, you can do the rest of the steps in place. Actually, in that case, the quarantine may already be stripped for you once you run the installer.