s4-ldb: don't allow modifies outside a transaction.