- system stores open both HKLM and HKCU for "current user" locations
- fix a memory leak in certificate properties