Dan Kegel : advapi32: RegGetKeySecurity needs to pass length of struct to caller.