Well, we have ResolveBookmarkDataToCFURLMBS in CFBookmarkMBS module.
There you get a CFURLMBS object.
That module also has StartAccessingSecurityScopedResource method to start the access.
Key thing is to keep the CFURLMBS around as security scope is linked to it.