Great post on User Certificate Autoenrollment