dsdb-acl: don't call dsdb_user_password_support() if we don't use the result