Setting security descriptor to NDIS miniport adapter functional device object

Hi,

In my NDIS miniport driver, i have to handle some app specific ioctl, so i am hooking my IOCTL handler in the DriverEntry().
At the same time, i want to make sure that the IOCTL interface is invoked only by the LocalSystem account. For this i am planning to attach security descriptor to the functional device object of NDIS miniport adapter which can be retrieved using the NdisMGetDeviceProperty().

https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/ndis/nf-ndis-ndismgetdeviceproperty

Is this right approach?

Thanks,