s4:dsdb/descriptor: give SYSTEM the correct default owner (group) sid