We are working on setting enforcing our PowerShell Execution Group Policy to "AllSigned". This will restrict the ability to run any PowerShell scripts in our environment unless they are signed by our internal CA. 

I'm pretty sure the template scripts won't be able to run once this is deployed. Has anyone had any experience with enforcing that with Endpoint Central? Is there a way to go and modify the template to grab a copy of the script and sign it?