urlmon: Use protocol handler's IUnknown to query other interfaces in BindProtocol.