s3-auth: Only call pdb_get_acct_ctrl() once in check_sam_security