The way we do things now, we tag the HEAD commit on master when it's release time. I agree that it would make sense to leave the tag in the same state master would be in, that is, no data rights license applied. Then when we need to package the release to send to the customer a developer will use the license tool to apply the headers to the tagged code.