Update and measure those are the only understand answers
The publisher tab in the application control allows you to manage the various certificates that are used to sign to binaries. Publisher allow executables of a particular vendor, signed by a security certificate issued
to the vendor by a Certificate Authority. Also, all applications and binary files either added
to or modified on an endpoint that are signed by the certificate are automatically added to
the whitelist.
