https://www.petervanderwoude.nl/post/prepare-configmgr-client-for-capture-doesnt-remove-the-allowedrootcahashcode-value/