An interesting excerpt:

    // When Windows creates this key, it is read-only (Deny Set Value), so we need
    // to delete it first.
    // We don't set any similar special permissions.