s4:irpc: use LIBNDR_FLAG_REF_ALLOC for the server side when pulling