We should update our build process to embed an appropriate manifest in the Windows binaries that documents things like DPI support, security state, (eventually) sandbox features, etc. Currently we include some anti-patterns (such as calling ::SetProcessDPIAware), which should be handled through manfiest entries (similar to Cocoa entitlements).