I tried using VBScript to get around the issue, but it looks like the limitation is related to the Variant type used by KiXtart which is also used by VBScript.

I'm so close to being able to write ACL entries for UltraVNC directly into the registry, but I can't find any way to deal with HEX values that are large enough.