libcli/security: add security_descriptor_for_client() helper function