Use it to implement NtQuerySecurityObject.

These both don't operate on tokens so token.c is not the right place for 
them to be implemented.

gdi32: Only cache the glyph metrics when rendering to a monochrome bitmap or when just retrieving the metrics.

mshtml: Pass the IDispatch interface of the element right-clicked on to IDocHostUIHandler_ShowContextMenu if applicable instead of always the document's one.

Found by Rob Shearman.