s4:kdc/db-glue: make use of dsdb_trust_search_tdo()