s4-ldb: display security descriptors with correct SDL for known SIDs