python-s4: use secrets.ldb instead of sam.ldb for reading domain SID