Sign binaries with a Code Signing Certificate

[fredrikeriksson]

As I recently mentioned in a recent comment in #1431 to allow AppLocker whitelisting rules trusting the publisher of signed binaries is generally prefered.

Could this be considered at all?
https://signpath.org/ have a free OSS offering that you probably could use, don't have any personal experience with them though.

[latonz]

Thanks for bringing this up! We currently don’t have plans to implement this, but we appreciate the suggestion. If demand for this increases, we may reconsider it in the future.