kerberos principal users are also hidden

and delete wrong duplicated hiddenSid