kdc: Include values from msDS-User-Account-Control-Computed when checking user flags