Actually wait for and check success of CA installation on Windows

It turns out we only ever checked whether the install script could
be started, not whether it finished, successfully. Doing so is
rather involved, as must allow the confirmation dialog to show,
which requires us to hand back controll to the main event loop.