s3-client/client.c: replace cli_query_secdesc_old()