s4:ldap.py - test the new "systemFlags" constraint