s4:update_keytab LDB module - no need to filter for the DN