it really matters what the base required API version is. I can't see the app requiring later than v4.2.1, and, if it does, certainly not later than v4.6.0. It would be good to get an idea from the development team what feature raises the required API version. Also, it would be good to know why the app requires code signing.
__nil