security.idl: add wellknown TrustedInstaller SID