James Forshaw on Twitter: "@galdeleon Something I find interesting is how it's based on a token flag, similar to the child process mitigation. It should follow across impersonation boundaries, however it seems that for that to work both the primary and impersonation tokens need the flag set. Seems like an oversight." / Twitter
https://twitter.com/tiraniddo/status/1537475670481068032