- Change QueryServiceObjectSecurity so it initializes the ACL with a
  null DACL, and return as though it worked.
- Changed QueryServiceStatus to tell if the service is running by the
  presence of some named shared storage - copied from StartService when
  it checks to see if its already running.