docs: mention --sddl and --domain-sid in smbcacls manpage.