s4:cosmetic - the SID attribute is called objectSid - not objectSID