s4-repl: get NCs to replicate from our NTDS object