You mentioned code signing certs. What are your thoughts for document signing certificates? They embed a public copy into the document itself often not trusted..