After adding ownership to PrivilegeDescriptors, to be able to validate ownership, we have to know the version of the PrivilegedDescriptor.

Versions before the addition of the ownership field are allowed to have an empty owner field whereas versions after should have owners.