default SID map now reads in "trusted domains" from smb.conf.