Not actually hard, but had to wait for FUCKING XCODE to open, then get my cert out. And this part of the build script will break when anything updates or the cert expires.
https://developer.apple.com/library/archive/documentation/Security/Conceptual/CodeSigningGuide/Procedures/Procedures.html