s4-drs: replace manual checks with dsdb_modify_permissive()