s4:dsdb/acl_read: check the ldb_attr_list_copy_add() result