s4:rpc_server/netlogon: validate flags in netr_DsRGetDCNameEx2() and callers