server: Make sure to always initialise req_sd.owner_len and req_sd.group_len in the handler for the get_security_object call.