server: Properly set the default security descriptor values if the given security descriptor parameter is NULL. Currently only an non-null but empty security descriptor causes this.