I have been using Click Once to deploy rich clients for years, pretty much since it became an available tech. No longer the days of creating self-restarting hard to maintain launcher code in my main method. One of the pain points of it, and albeit for a pretty good reason, was signing the manifest files.