s4-upgradeprovision: don't print dn in the list of modified attributes