Code for properly reading user-added roots from the Windows CAPI. Used for Certificate Verification in /net/cert/