s4:ldap_server: don't call ldb_req_mark_untrusted() on the privileged ldapi socket