I installed it via brew only to find it wasn't signed. I'm going to assume that the binary in the dmg isn't signed, either.