add NDR_ERR_UNREAD_BYTES and don't use NTSTATUS directly