s4:dsdb/descriptor: pass object_list to create_security_descriptor()