@joshcooper says

```
@Iristyle if the non-sid methods for adding/removing users and groups are no longer used, please add a deprecation warning.
```

You got it.  I didn't know what potential downstream callers might be using this, so I went with the "safe" approach.  But if this is OK to deprecate based on it not being used internally, that works for me.