s3: pass DCE RPC handle type to create_policy_hnd