s4:kdc/db-glue: allow invalid kvno numbers in samba_kdc_trust_message2entry()