We don't need recipient X509Certificates to have private keys in the Windows S/MIME context