code: func applySID(id string, size int64, dest string) (int64, error) {
  	if err := security.GrantVmGroupAccess(dest); err != nil {
  		logrus.Warnf("lcowdriver: applySIDs: id %s failed %s", id, err)
  		return 0, err
  	}
  	return size, nil
  }
docs: // applySID adds the VM Group SID read-only access.