try to put every security descriptors related definitions in the same file.