Raiders of the Elevated Token: Understanding User Account Control and App Capabilities in Windows 8