libdsm functions return now a negative number in case of error. Add NT_STATUS
error check to detect permission errors in order to ask for credentials only in
that case.