Ok, either I'm missing something, or there's a sort of chicken-and-the-egg
problem. During the install I thought I'd configure a trusted app.
According to the docs, I need to use a tool in the PIM folder to do that.
But until I've completed the install, there is no PIM folder. I looked at
the extracted files and didn't see "GWTrustedApp.exe" anywhere. For now
is the idea to install it using a GW user, and then reconfigure GMS to use
a trusted app after it's installed?

And if all the above is right... are there any plans to change this in a
future release so that a trusted app can be configured and used during the
initial install?