s4-dsdb: Explicitly mark some internal ldb requests as trusted