Software Deployment

Hello All - Hope all is Well :-)
I packaged some activex controls into an msi and captured the registry changes.
Added the registry settings to make the website a trusted site in the package.
End result is users are not prompted to install the active x controls and the site is trusted.

We dont control any settings on the GPO and the package is needed like tomorow.
To test the reg settings I performed a gpupdate /force and reboot so the machine would get a fresh update to its Policy, the reg settings stayed.

Machines are locked down, the msi installs through a deployment tool using the deployments service account so it writes all the changes to the HKCU and HKLM registry hives.

Management feels that they cant control any activex updates that thevendor site implements and want greater control.
So they want to be able to install the activex controls without adding the site as a trusted site in the registry....can this be done...and if so how would I go about making those changes to my .msi.

Thanks in advance
Cheers