FYI, I've suggested (to my Roku overlords) 4 different possible plugin changes to address this issue - just waiting to see which way we're going with it.
Note, the plugin retains the packaging dev id and password for future use, so as long as the box is not re-keyed manually, or you do not delete or otherwise lose your eclipse instance, you're covered on future packaging thru that eclipse instance (obviously, this does not cover all possible cases, hence my submission of several possible enhancement requests to the plugin).