Re-add set_sd(), called from set_sd_blob(). Allows us to centralize all ACL canonical...