s4:dsdb/acl: fix search filter cleanup for password attributes