provision: add get_dns_{forest,domain}_microsoft_dns_descriptor()