product-builder (like kiwi) is just extracting the files out of the meta package. It is up to YaST to decide how these files shall get signed. We can't do this via the content file anymore obviously. I could add them to the CHECKSUMS file if this is wanted. But we need anyway to move them to another place (outside of suse/ directory), so it is up to the YaST people to define a new place.