The approach PD has is taken is according to Shane the same as other AV vendors do
Quote
We use the same approach many AVs have taken. On install we generate a root certificate with random keys and install it into the local certificate store. We then...