nvda

6409713a - secureProcess.token.restrictedToken: disable some more dangerous SIDs, including domain ones.