s3-secdesc: move all winreg access bits to IDL.