The client's current way of deploying the form is as a certificated MSI. They wanted an automated way to push new versions of the form out.
But, as is often the case, the project has galloped off in a new direction so this is no longer a live issue. I do thank you for your quick reply to my question, and I'm very glad to have ...