How else are you going to have the ability to revoke malware’s signing keys to get it to stop running on every machine immediately?