it seems stupid but this for  exception safe  programming  in theory the assignment to sddl string could fail with an exception and the sid would never be freed  of course we do not typically have exceptions enabled  but still probably should try and be safe 