s4-dsdb extended_dn_out: Move lazy dereference control creation to lazy-init