WIP: s4:netlogon: return NT_STATUS_NO_TRUST_SAM_ACCOUNT if we don't have an NTHASH for an account

This matters mostly when we're an RODC and don't have the password attributes locally.

I found that just by reading [MS-NRPC]. We need tests in order to complete this.