s4-drs: added domain_sid to DRS security checks