[Bug 39683] CreateRestrictedToken() uses wrong enum value for default impersonation level