I noticed two issues with sysdb upgrades:
Patch 0001: If the transaction failed to commit for any reason, we were
not cancelling it. This could leave the LDB in an unusable state.
Patch 0002: There was a double-free in sysdb_domain_init_internal(),
since tmp_ctx was allocated as a child of ctx.