s3: smbd: Ensure open for security descriptor access actually opens an fd.