Maybe until UAC is improved you can ship with a launcher process that is signed by publisher "Unknown"?