s3: Use sid_check_is_domain instead of a direct sid_equal