server: implement passing a thread security descriptor to CreateProcess