Scripts/FixExpiredCert.ps1 (2 lines):
	- line 211: #TODO: validate newThumbprint is installed
	- line 218: #TODO: validate newThumbprint is ACL'd for NETWORK_SERVICE