The JRE and the Plug-In don't include javakey, which is used for
importing certificates as well as for signing JAR files.

People using the Plug-In won't be able to run signed applets unless they
independently get a copy of javakey, put it on their system, and use it
to import certificates.