[NTOS:SE] Assign the control flag bits to the newly created security descriptor

We allocate memory pool for a new security descriptor with specific info filled by the caller but we don't set the control flag bits for the newly allocated descriptor, which is wrong. Originally spotted by Vadim Galyant.
CORE-17650

ntoskrnl/se/sd.c

@@ -962,6 +962,7 @@ SeSetSecurityDescriptorInfoEx(
         Current += SaclLength;
     }
 
+    NewSd->Control |= Control;
     *ObjectsSecurityDescriptor = NewSd;
     return STATUS_SUCCESS;
 }