I think we also need `FORMAT_MESSAGE_IGNORE_INSERTS`. From security remarks in http://msdn.microsoft.com/en-us/library/windows/desktop/ms679351(v=vs.85).aspx:

<pre>
In particular, it is unsafe to take an arbitrary system error code returned from an API and use FORMAT_MESSAGE_FROM_SYSTEM without FORMAT_MESSAGE_IGNORE_INSERTS.
</pre>