When klogg is started from downloaded DMG package MacOS flags it as coming from untrusted source. There should be a way to codesign DMG to avoid this.