Actually, there's something weird about what Cingular is doing here. They allow you to select "Ask Once" for native S60 apps, even unsigned (assuming you've changed the setting in application config to allow unsigned apps), so the restriction is only for J2ME.