s4:dsdb/descriptor: add some error checks to descriptor_{add,modify}