libgpo: call security_token_has_sid() directly