s4-drs: allow getncchanges from RODC with WRIT_REP set