pub const NCRYPT_ALLOW_DECRYPT_FLAG: u32 = 1u32;