do we still need this the only thing running  nshlibsign  is the nss ebuild at the very least  change this to a symlink and stop modifying the for loop kill this off after the next major upgrade dosym shlibsign  usr bin nshlibsign