s4 dsdb kcc: Prefer msDS-hasMasterNCs over hasMasterNCs when replicating