libcli/security: sddl: check a talloc_zero