s4-drs: open samdb with system credentials when authorised