s4-ldb: two DNs only match if they have the same deletion status