samba-tool dbcheck: Add --reset-well-known-acls