Bypass default encryption policy when expanding sandbox vhdx

This fixes the following error when running on machines with a policy to
enforce bitlocker encryption on fixed drives

```
failed to create scratch layer: failed to expand sandbox vhdx size to #### bytes: FSCTL_EXTEND_VOLUME \\?\Volume{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}: The media is write protected.
```

Fixed: #2464
Signed-off-by: Matthew Endsley <[email protected]>

Author: mendsley

internal/wclayer/expandscratchsize.go

@@ -12,6 +12,7 @@ import (
 	"github.com/Microsoft/hcsshim/internal/hcserror"
 	"github.com/Microsoft/hcsshim/internal/oc"
 	"go.opencensus.io/trace"
+	"github.com/Microsoft/go-winio/vhd"
 )
 
 // ExpandScratchSize expands the size of a layer to at least size bytes.
@@ -75,7 +76,7 @@ func attachVhd(path string) (syscall.Handle, error) {
 	if err != nil {
 		return 0, &os.PathError{Op: "OpenVirtualDisk", Path: path, Err: err}
 	}
-	err = attachVirtualDisk(handle, 0, 0, 0, 0, 0)
+	err = vhd.AttachVirtualDisk(handle, vhd.AttachVirtualDiskFlagBypassDefaultEncryptionPolicy, nil)
 	if err != nil {
 		syscall.Close(handle)
 		return 0, &os.PathError{Op: "AttachVirtualDisk", Path: path, Err: err}