Performs a security access check of a security descriptor against an impersonation token, returning the granted access mask.
Retrieves a self-relative SECURITY_DESCRIPTOR from any kernel object exposed via a handle.