pub const NCRYPT_CLAIM_SUBJECT_ONLY: u32 = 2u32;