tools: Only allow the absolute difference in bracket pairs to be less than 128, since we need the sign.

server: Setting a security descriptor should not replace an existing owner or group with a default, if only a DACL is being set.

comctl32: The RECT in the custom draw structure should be the entire item's size. This includes any separated dropdown arrow.