I have run the command codesign -dr - /path/to/app and codesign -dr - /Applications/application.app for my program and I get a return answer of the executable location followed by Anchor Trusted.
When I run the same command for Google Chrome I get the whole designate => part to create a PPPC payload properly.
After digging into the plist I see that the signature is ????. I assume this means it isn't signed. I further assume that if it isn't signed I can't create a PPPC payload for it. I make that assumption from this article
1. The item being whitelisted must be code-signed
So, If it isn't signed I can not use the built in PCCC option. (Is this assumption correct)
Follow up. Can you use the PCCC Utility to do unsigned apps (in the process of testing)? Or I am just out of luck for those apps.