Document --require-membership-of={SID|Name}