Can drivers be signed by any CA trusted by the system or does it have to be the Microsoft CA? Shitty solution but if you're installing someone's (otherwise unsigned) driver, you're already placing a lot of trust in them.