auth4: use "anonymous sam winbind_rodc sam_failtrusts sam_ignoredomain" as AD_DC