s4:samba_upgradeprovision: use the sd_flags:1:15 control with an empty sd