The PMPC provided pre and post scripts are signed by Patch My PC. This code signing cert is not in the trusted publisher certificate store on client devices. The publisher should re-sign the scripts with the existing WSUS Code Signing certificate to ensure it is already trusted by clients.