Unfortunately, APG can't handle S/MIME certs. I found and downloaded X509Tools, and it seems to get the job done, albeit a bit clunkily. (When I installed my certs before, apparently they really didn't - X509Tools showed no installed private keys, and when I installed them via X509Tools, then...