Use supported API to set CAPID in the SACL (#4496)

src/Microsoft.PowerShell.Security/security/AclCommands.cs

@@ -1194,7 +1194,7 @@ namespace Microsoft.PowerShell.Commands
                 }
 
                 // Add CAPID to the SACL.
-                rs = NativeMethods.RtlAddScopedPolicyIDAce(
+                rs = NativeMethods.AddScopedPolicyIDAce(
                     pSacl,
                     NativeMethods.ACL_REVISION,
                     NativeMethods.SUB_CONTAINERS_AND_OBJECTS_INHERIT,

src/System.Management.Automation/security/nativeMethods.cs

@@ -1786,8 +1786,8 @@ namespace System.Management.Automation.Security
             uint nAclLength,
             uint dwAclRevision);
 
-        [DllImport("ntdll.dll", CharSet = CharSet.Unicode)]
-        internal static extern uint RtlAddScopedPolicyIDAce(
+        [DllImport("api-ms-win-security-base-l1-2-0.dll", CharSet = CharSet.Unicode)]
+        internal static extern uint AddScopedPolicyIDAce(
             IntPtr Acl,
             uint AceRevision,
             uint AceFlags,