diff --git a/CI/before-deploy-osx.sh b/CI/before-deploy-osx.sh
index 15adcb134..3906ccb97 100755
--- a/CI/before-deploy-osx.sh
+++ b/CI/before-deploy-osx.sh
@@ -45,6 +45,8 @@ security create-keychain -p mysecretpassword build.keychain
 security default-keychain -s build.keychain
 security unlock-keychain -p mysecretpassword build.keychain
 security set-keychain-settings -t 3600 -u build.keychain
+security set-key-partition-list -S apple-tool:,apple: -s -k mysecretpassword build.keychain
+security list-keychains -s build.keychain
 hr "Importing certs into keychain"
 security import ./Certificates.p12 -k build.keychain -T /usr/bin/productsign -P ""
 hr "Signing Package"
diff --git a/CI/install/osx/build_app.py b/CI/install/osx/build_app.py
index 291f2ae47..edda89540 100644
--- a/CI/install/osx/build_app.py
+++ b/CI/install/osx/build_app.py
@@ -84,7 +84,8 @@ for i in candidate_paths:
 		for file_ in files:
 			path = root + "/" + file_
 			try:
-				out = check_output("{0}otool -L '{1}'".format(args.prefix, path), shell=True,
+				out = check_output("{0}otool -L '{1}'".format(args.prefix, path),
+						stderr=subprocess.STDOUT, shell=True,
 						universal_newlines=True)
 				if "The file was not recognized as a valid object file" in out:
 					continue