s4:dsdb/descriptor: NULL out user_descriptor elements depending on the sd_flags