dsdb: fix double-free in replication failure case on RODC