Spotted by André Hentschel.

crypt32: Set correct error when encountering unsupported critical extensions in the base and SSL policy.

crypt32/tests: Test the base and SSL policies against a certificate with an invalid critical extension.

msi Set the feature action to INSTALLSTATE_UNKNOWN if msidbFeatureAttributesUIDisallowAbsent is set.

There is no ddraw equivalent for this format, as ddraw only supports 2
bump channels. Trying to enumerate this format will only lead to a
confusing (but correct) ERR message

urlmon: Report error on synchronous bindings that don't have a cache file and are not read in callback.

crypt32/tests: Add more tests of verifying the base policy, including flags to ignore certain errors.