s4-dsdb: ensure rIDSetReferences is stored as an extended DN