s4:regshell - don't return an error code if we get a security descriptors error