(doc) Creator_Group for groups
(PUP-844) Ace - check for id.nil on get

Instead of relying on the set method to properly set the id for an ace, attempt
to use the provider method when getting the id instead. This removes the order
that identity and id will need to be set in and further allows for checking the
id value later when being used with items that have not set the value.
(PUP-1737) Error throwing in monkey patch

If SID.new() is called prior to everything being loaded, it seems that there is
a need to include the Error class in the patch.
(PUP-845) SID match get_account_id

When getting the SID, if you provide a SID that is a non-existing user, the
call to Puppet::Util::Windows::Security.name_to_sid will return nil instead of
just returning the SID. So a match is necessary and provides a performance
boost as there is no need to make the check unless the value is not in the
SID string format.
(PUP-1737) Remove non-existing users

This ensures the check for non-existing users only runs when `ensure =>
present`. Without this acl will not allow you to remove users that no
longer exist.