s4-ldb: make DN escaping/unescaping consistent