* document the required variables for using certificates when authenticating to Windows * clarify that certificates are for local (non-domain) users