Please, no responses about SQL security, etc: the client wants them deleted so I want to delete them.
I'm guessing the entries need to go in the RemoveFile table but how do I arrange that they're only removed after the CA which uses them has been run?
For the time being I'm using an embedded VBScript CA which works well, but I'm sure there has to be a native, MSI way. I've been scripting for so long, it's become an automatic choice for me
