Use SeAssignSecurity() to build a security descriptor for a new object.