dsdb: Allow SAMR server to return the computed, not actual badPwdCount