samba-tool: allow sid strings for 'group {add,remove}members'