I am distributing an authenticode signed self-extracting executable whose content I control.
It contains a mushroom of MSI-based installers that controls a hot swap of a distributed system, so it cannot easily be an MSI itself.
It would be nice to have if the executable just checked its own authenticode and refused to self-extract if not signed. I do realize that this provides no real integrity guarantee, but it would reinforce the message that the content is in no way customizable and perhaps make some formal certifications easier to handle.
One possible strategy might be based on with this still unanswered question. Any other ideas?