Adding method to create process using LowBox token in sandbox code.

sandbox/win/src/sid.h

Index: sandbox/win/src/sid.h
diff --git a/sandbox/win/src/sid.h b/sandbox/win/src/sid.h
index 4656859bec99b62ad05624870069155bf38b7977..7a10de5e0308ebb16e562e1f32bca9b5e011f3cd 100644
--- a/sandbox/win/src/sid.h
+++ b/sandbox/win/src/sid.h
@@ -5,6 +5,7 @@
 #ifndef SANDBOX_SRC_SID_H_
 #define SANDBOX_SRC_SID_H_
 
+#include <string>
 #include <windows.h>
 
 namespace sandbox {
@@ -20,8 +21,13 @@ class Sid {
   // Returns sid_.
   const SID *GetPSID() const;
 
+  // Returns sid based on wellknown or provided sid but with unique
+  // subauthority.
+  void GenerateUniqueSubAuthoritySid(std::wstring* unique_sid);
+
  private:
   BYTE sid_[SECURITY_MAX_SID_SIZE];
+  PSID unique_sub_auth_sid_;
 };
 
 }  // namespace sandbox