We *could* fill out these in many cases, in the outer layers. For example, when `samba-tool dns` gets NT_STATUS_IO_TIMEOUT and says "{Device Timeout} The specified I/O operation on %hs was not completed before the time-out period expired." the %hs is probably the server name, as it likely is for any NT_STATUS error from dnsserver rpc. So dns_connect() in python/samba/netcmd/dns.py could do the substitution in the error path. But we'd need to check against windows, and it is not currently a priority.