My company's stated policy is that all developers must sign any Word/Excel/Access macro code.

Unfortunately, while publishing a trusted root CA certificate is very easy with GPO, there doesn't seem to be a way to publish a "truster publisher" certificate.

Any ideas?