s4-dsdb: switched to using RMD_FLAGS instead of DELETED in extended DNs