Is there a way to provide all variables required for signing via command line? It looks like some of them could use compiler variables, but not the password.

Alternatively, is there a file or registry location to set the global signing settings?

All of our builds are done through automated build processes, and it would not be reasonable to update either the build agents or each installer script each time we update our certificate.