Apple's operating systems are the only ones to fully implement code protection and signing by design, rather than as "add-ons". The implementation, however, remains undocumented. This talk illuminates its darkest corners, demonstrating how proper cryptographic concepts are put into practice - but also those cases where the implementation falls short of its promise.