s4:dsdb/descriptor: skip duplicates in descriptor_extended_sec_desc_propagation()