OK, so I took this out a level, and in my manifest used `' SYSTEM'` instead of `SYSTEM`

It crashes and burns.  So I think what I'm going to do is modify `name_to_sid_object` itself to `strip` the string input.  Then I don't have to go hunting around and fixing up all the call sites.

With that said, that means I remove the `strip` here, and write a couple more tests for `name_to_sid_object`

I think it's better to be a little resilient here, and not treat whitespace as significant in the manifest, unless you feel strongly that it should.