libcli/security: use NUMERIC_CMP in dom_sid_compare()