s4-dsdb: make ldb_password_hash depend on hdb not HEIMDAL_HDB_KEYS