RSA certificates that use a CNG KSP are now supported.
Build script update

Sign task must now be invoked explicitly, but can also be run separately from Test / Build if desired.