s4:dsdb/schema_data: make sure we reject schema changes if we're not the schema master