s4:samldb LDB module - deny also the direct modification of "isCriticalSystemObject...