s4:python/ntacl: allow string or objects for sd/sid in setntacl()