s4:sec_descriptor - fix constant