s4-samdb: when UF_SERVER_TRUST_ACCOUNT is set mark object as critical