+ app.manifest, require administrator to run