--- a/common/util.h	Tue Sep 02 10:54:51 2014 +0200
+++ b/common/util.h	Tue Sep 02 14:25:40 2014 +0200
@@ -136,6 +136,23 @@
   */
 bool create_restricted_directory (LPWSTR path);
 
+/** @brief get a restricted access token to execute nss process
+  *
+  * This function uses the Software Restriction API to obtain the
+  * access token for a process run als normal user.
+  *
+  * @returns A restricted handle or NULL on error.
+  */
+HANDLE get_restricted_token();
+
+/** @brief get a normal user access token
+  *
+  * The trusted acces token is not elevated but has the normal user rights.
+  *
+  * @returns A normal user handle or NULL on error.
+  */
+HANDLE get_normal_token();
+
 #endif
 
 #ifdef __cplusplus