s4:setup: don't set objectCategory: CN=Domain-DNS,${SCHEMADN}