Hmm I can see what you mean, there is a bit on MSDN about how to create SHAs etc but not anything that I can see about how you actually get them into NAP on the client and server side once you have made it...