s4:rpc-server:samr: fix setting of lockout duration < lockout window