[ ] Despite sids_to_disable and sids_to_restrict both sounding like negative/subtractive options, "sids_to_restrict" contains a list of sids that are positively added to the second list of sids to be used for access checks. Sanitizing parameters in this context would be great.
[ ] An empty privileges list and a None privileges list are equivalent, remove the pointless Option?
[ ] An empty sids_to_disable list and a None sids list are equivalent, remove the pointless Option?
[ ] An empty sids_to_restrict list is not the same as a None restriction list. Keep that at least.
Noneprivileges list are equivalent, remove the pointlessOption?Nonesids list are equivalent, remove the pointlessOption?Nonerestriction list. Keep that at least.