Two patches have been disabled and I think they need to rewritten to use the PS_ATTRIBUTE_TOKEN attribute instead of calling the RtlCreateUserProcess directly.