s3-netlogon: fix updating trust accout passwords with downlevel domains.