Code signing would help with stolen authentication tokens.