auth: add SeDiskOperatorsPrivilege to get_root_nt_token to fix registry shares.