`samba-tool delegation` should support RBCD so that we can set msDS-AllowedToActOnBehalfOfOtherIdentity
This bug was referenced in samba master: e4ea06ec242e6f26a5d997d0ba992bc0d2437cba 572f90bdefcde13611fe50b7a5228fd6e3db2117 9a480f274b62d8e491bcd54bfd189099729ff57a 52f9629408e7674f28a90d030c475178d644e192