The command line flickered:

At 4:02 AM, he watched the first kiosk poll for updates. A green checkmark appeared: “ActiveX control installed successfully.” A test intersection—Elm and Main—flipped from red to green.

Leo smiled. Dave understood. Some installers aren’t software. They are stewardship.

Step one: install the intermediate certificate. Done. Step two: import the code-signing key (stored on a physical SafeNet dongle that dangled from his keychain). The dongle blinked green. Step three: run the signer.

Leo exhaled. But the installer wasn’t done. The final step: redeploy the CAB file. The old installer script built a new cabinet file, embedded the signed control, and pushed it to the county’s internal update server.

Three dots appeared. Then: “Can’t you just use a self-signed cert and push via Group Policy?”

He called Priya. No answer. He texted her: “Traffic grid cert dead. Need signer installer now.”