A couple of serviceability-related launchers (jstack, jmap, jinfo and jsadebugd) need to be signed with the codesign utility. This signing is present in the old build but was never ported to the new build.

See make/common/Program.gmk:

  ifeq ($(findstring privileged, $(INFO_PLIST_FILE)), privileged)
-codesign -s openjdk_codesign $@
  endif