Certain firewalls refuse to add mnc to a permanent whitelist because the file is not signed at all. Some form of digital signature would fix this.