s4:acl LDB module - use also here "dsdb_find_nc_root" to implement the NC-specific...