Winrm server certgen command

Install certificate to the store, create winrm listener.
We should remove this option -- negotiate auth should work fine with ssl, so there's no need for basic.