s4:cldap_server: set DS_SERVER_SELECT_SECRET_DOMAIN_6 if we're a RODC