s3:libsmb: add cli_{query,set}_security_descriptor() which take sec_info flags