And this is why Microsoft requires signing keys to live in hardware for signing code.