Change the other two places where we set a security descriptor given by the client...