I think it's better to have this in advapi32 for now to avoid explicit library load and forwards pointing to each other. Once we'll start to move things out of advapi32 one extra function won't make a difference.