advapi32/tests: Show that tokens do not inherit security descriptors during duplication.