python/samba/provision: Ensure KDS root key is usable as soon as provision is complete