Enable logon-as-service in windows_service (CHEF-4921).

Could you add a comment here about why we have to shellout to secedit instead of FFI?