Oh, on the topic of signing certs, if no one runs it it won't really matter. You may need as many as several hundred or thousand users to try running it before it just works. It's actual insanity.
