s4-dsdb guard principalName parse for invalid inputs