s4: security.idl: split of dom_sid stuff into dom_sid.idl