Software Deployment

I'm trying to deploy firefox 2.0.0.16 with a trusted certificate through group policy. One method would be by adding the cert to the "my" key in the registry. I can't get this to work even after installing the PKCS #11 module to expose the certs in the windows store (firefox still doesn't ack the cert). I can't find a way to script edit the cert8.db and directly insert the cert. I will try using vm snapshots to create an mst, but from searches, people don't seem to be having much luck with that. Does anyone have any other suggestions?