s4:dsdb/schema: add "dsdb:schema update allowed" option to enable schema updates