s4:samldb LDB module - don't change the "primaryGroupId" on LDB modifications unless...