s4:samldb LDB module - deny delete operations on some important attributes