self-relative security descriptor