Wrong variable being used, which causes a fatal error.

createForm method was trying to access getSecurityHandler() from itself, when it should have been using the data object since that object actually has the method, whereas AdminObjectAclManipulator doesn't.