libcli/security: avoid usage of dom_sid_parse_talloc() in sec_access_check_ds()