server: Don't do access checks on the security descriptors of newly created objects.