s3:services_db: create the "Security" subkey if it does not exist in svcctl_set_secdesc()