s4:dsdb/descriptor: move special dn check to the start of descriptor_{add,modify...