Some repositories don't require signing in VMR builds. Repos that we know do not contribute any artifacts that will be redisted by shipping packages in other components should have their ItemsToSign lists emptied.

I think arcade may be the only case of this.

This does not require any of the rest of the signing work to be complete.