Motivation

We distribute several tools internally that we want to ensure are code-signed (particularly ClickOnce applications).

The goals were:

1. Anyone on the team could build and publish the tools (including ClickOnce tools).
2. No team member has to go through manual steps: they should be able to sync and build.
3. No UI popups during the build (such as passwords).
4. No trust issues when using the tools–Certificates are trusted.