Option to use users chosen digital certificates

That could be as well as the default list, because if your installing it on a fresh system you wont have many executables to scan.