This is needed for PBOs because for those memory allocation works differently.

crypt32: Add a root store implementation that reads trusted certificates from well-known locations on the local system.

crypt32: Add a function to create a certificate chain engine potentially before the root store is created.