r4321: objectClass trustedDomain uses "securityIdentifier" for the sid