s4-subdomain: create trust record with forest root DC