s4:samba-tool/gpo: fix the operation order when creating gpos