Change get_nt_acl_no_snum() to return an NTSTATUS, not a struct security_descriptor *.