added jeremy's new c++-like code for parsing of security descriptors.