s4-ldap-server: set the NO_GLOBAL_CATALOG control on non-GC operations