Validate ACCESS_SYSTEM_SECURITY access requests when creating a new
handle in ObpIncrementHandleCount.
- Check for SeSecurityPrivilege (with SeSinglePrivilegeCheck) when a
caller requests ACCESS_SYSTEM_SECURITY on handle creation.
- Take away ACCESS_SYSTEM_SECURITY from RemainingDesiredAccess /
PreviouslyGrantedAccess if the privilege isn't held.
