mdssvc: Use ndr_policy_handle_empty()