Can you force re-sign apps others bought and have them run on your provisioning profile? Seems like a security hole...