s4:dsdb - proof against empty RDN values where expected