r15057: fix access masks for getting and setting security_descriptors