s4-drs: Make drs_ObjectIdentifier_to_dn() safer and able to cope with DummyDN values