s4-python: make checks of sacl in get_diff_sddls optionnal