Yeah, you are right about the lookup. Also I did see the `host` parameter being set to the local hostname when enumerating local accounts (since I'm not domain joined). Alternatively, we could compare `sid.domain == sid.host` in the code that calls this method, and pass '.'? My concern about `Socket.gethostname` is that it may be expensive or return the wrong hostname in a multihomed host.