s4:auth: Add password lockout support to the AD DC