Provide dummy security descriptor by default

Some Windows utilities seem to require a working GetFileSecurity() callback.
Threrefore provide some minimal descriptor.