winex11: Make sure the formats are the same instead of the depths since the bit ordering can be different.

The internal order of the depth and stencil bits is unspecified since the
format isn't lockable.

We don't just use the function for StorageImpl.

The function is not always called with a top-level storage object, and the
signature should reflect that.

Finding the parent of a node in a binary tree is a detail that should
be handled inside the function.

The directory entry should still be valid as long as it's in the tree.

crypt32: Only permit v1 or v2 CA certificates without a key usage extension if they're installed locally.

crypt32: Only permit v1 or v2 CA certificates without a basic constraints extension if they're installed locally.