than referencing existing X509_NAME_ENTRY structures so needs to be
completely freed.

CryptUIDlgSelectCertificateFromStore() at runtime. Add callback function
for selection mechanism.

CryptoAPI ENGINE.

Add appropriate #ifdefs round client cert functions in headers.