s3:passdb: let pdb_get_trust_credentials() try pdb_get_trusteddom_creds() first