CryptGetUserKey: Set return key handle to zero in case of failure.