s4:samldb LDB module - permit "userAccountControl" modifications without acct. type