s4:provision_users.ldif: Add Protected Users group