security_descriptor.h: updates