samba-tool: let 'domain level raise --domain-level' use the correct crossRef dn