SID_RID
VERIFY(nvlist_add_uint32(nvl_sid, SID_RID, rid) == 0);
&domain) || nvlist_lookup_uint32(nvp_sid, SID_RID,