s4:dsdb/acl_read: enable acl checking on search by default (bug #8620)