The Windows System Internals book (6th edition IIRC) also mentions that even debug builds of Microsoft Windows Vista and newer have certain restrictions in observing the kernel, and seeing CSS decryption keys was the thing they mentioned in particular.