feature(security/windows): Add defense-in-depth measure for insecure system PATH configuration
If an administrator has configured their system insecurely by adding a
user-writeable path to the system-wide PATH variable, this can cause
apps running as admin to load DLLs planted in this directory.
While the root cause is clearly the misconfigured system, we can reduce
Sunshine's exposure to this by asking Windows not to search the PATH.
https://devblogs.microsoft.com/oldnewthing/20200420-00/?p=103685
Cameron Gutman
9db11a9061