Specifies that the created process is part of the Trusted
    Computing Base (TCB) and performs its own auditing. The /DETACH
    qualifier is required as well as the IMPERSONATE privilege.