s4:rpc_server/samr: only set pwdLastSet to "0" or "-1"