s4:provision_self_join.ldif - the object SID in AD is called "objectSid"