s3: Refactor getting sec_info from a security_descriptor into separate function