s4:ldap.py - check the write protection on LSA objects