NtDuplicateToken() must create and return a handle to the duplicated token.