[Bug 39683] New: CreateRestrictedToken() uses wrong enum value for default impersonation level