Use TALLOC_ZERO_P instead of separate ZERO_STRUCTP in dup_nt_token