One more important thing for now I believe that providing the infrastructure for the certificates is NOT the kind of thing the MSFT will subsume in the OS in the near future if ever.