Handle kvno increment for RODCs
Since the actual password change does not happen on the read-only domain controller (RODC) the kvno change has to be replicated back which might take some time. So we check the kvno before and after the change if we are connected to a RODC and increment the kvno if needed.