s4-dsdb Print clearer error messages when invalid account flags are specified on add