This line seems redundant, since if the assignment to `sid` on line 66 below fails, then presumably the application of `acl_manifest` is going to fail as well since it will contain the permissions parameter `identity => ''`.   Would it be better to assert that `sid` is non-`nil` after line 66 and error out if it is?