Somehow missed the change that code signing certs now require a hardware token (and got about x3 more expensive…). Oof.
Suppose the bright side of this - might as well use Digicert and get as far away as possible from the dumpster fire that is Sectico…