Cross Database with Application Role
Just found the answer:


Create SQL login with minimal privileges
Execute function from source database under that user (WITH EXECUTE AS)
Module sign object
GRANT AUTHENTICATE to user created from certificate (this is the one I missed)