dsdb: Allow special chars like "@" in samAccountName when generating the salt