Move obtaining the user SID to a separate function in the Default Folder ACLs patch.
Move obtaining the admin SID to a separate function in the Default Folder ACLs patch.
Simplify the allocation of the security descriptor in the Default Folder ACLs patch.
Simplify the security descriptor return value in the Default Folder ACLs patch.
Make _SHGetUserSecurityDescriptor static in the Default Folder ACLs patch.