s4-dsdb Add 'block anonymous' checks to the rootdse module