secur32: Use ~0UL instead of -1 for invalid schannel handles.