I put together a small commandline tool to help catch these developer cert-swap situations. I wrapped it up in a LaunchAgent to periodically check and alert to this condition.

https://github.com/luckman212/cscheck