s4:dcesrv_samr - prevent "ldb_modify" on a possibly empty message