Enable smartcard logon for windows

[gderber]

Need to be able to enable smartcard logon for windows.

Refs:

• https://docs.microsoft.com/en-us/troubleshoot/windows-server/windows-security/enabling-smart-card-logon-third-party-certification-authorities
• https://docs.microsoft.com/en-us/windows/security/identity-protection/smart-cards/smart-card-how-smart-card-sign-in-works-in-windows
• https://superuser.com/questions/446969/how-to-logon-to-windows-with-a-smartcard/447002
• https://doc.primekey.com/ejbca/ejbca-integration/integrating-with-third-party-applications/microsoft-smart-card-logon
• https://docs.microsoft.com/en-us/windows/security/identity-protection/smart-cards/smart-card-how-smart-card-sign-in-works-in-windows
• https://docs.microsoft.com/en-us/windows/security/identity-protection/smart-cards/smart-card-windows-smart-card-technical-reference
• https://www.serverbrain.org/active-directory-infrastructure-2003/setting-up-a-smart-card-for-user-logon.html
• https://superuser.com/questions/1268620/samba-ad-windows-10-smart-card-login
• https://www.youtube.com/watch?v=C7bqTKdM8w0
• https://scriptech.io/linux-enable-smartcard-authentication-against-active-directory-and-generate-tgt-using-pkinit/
• https://www.securew2.com/blog/smart-card-authentication-with-active-directory/
• https://www.spinics.net/lists/samba/msg167258.html
• https://www.spinics.net/lists/samba/msg167264.html
• https://www.flyn.org/notes/ad/