winhttp: More completely implement querying WINHTTP_OPTION_SECURITY_FLAGS.