Check out this really great guide:

http://www.dallaway.com/acad/webstart/

Shows you how to use a Thawte FreeMail Digital Certificate to sign your webstart apps. This makes you trusted according to windows - nicer feel to that evil webstart box generally.