s4:dsdb/password_hash: move ldb_msg_add_empty() calls to update_final_msg()