afscp: avoid null dereference in _GetSecurityObject error case