As a result we don't try to establish ncacn_ip_tcp connections to lsa or samr.
Patched in master. Backport for 4.8 attached to bug #13231.
Pushed to both 4-8-test, closing out bug report.