context boxing protocol for safer CredUI interop