s3:cli_netlogon: make sure rpccli_connect_netlogon only returns NT_STATUS_OK on success