s4:objectclass LDB module - LSA objects - allow them if the SYSTEM control is specified