Kernel Extension validation did change?

Observations:


In which specific version of Mac OS X, OS X, macOS did the validation code for Kernel Extension changed?


In macOS Sierra 10.12.4b, trying to load a kernel extension with extra files in the _CodeSignature folder fails and codesign -vvvvv explains the reason: "unsealed contents present in the bundle root".


In OS X 10.11.6, the same kernel extension (with the extra files) loads fine and codesign -vvvvvv states that all the requirements are met.


Question:


Did this change with macOS Sierra 10.12.3? Has there been a release note about this?