'net idmap restore' is too useful to be left broken :-)