I am attempting to use Symantec's service to whitelist future patches, but their page suggests it may take up to 3 weeks. Hopefully, once it sees a few submissions with our digital signing certificate, it'll move that into the "happier by default" phase of things.
Kris