s4:provision: add get_empty_descriptor()