[Samba] BadPwdCount Attribute. Why no replication?

[James]

Hello,

    With the upgrade to 4.2 I now have access the the lockout feature.
I've learned the BadPwdCount attribute does not get replicated. Why is
this? My understanding is one DC could have a value of '2' while another
has '1'. Depending on what DC the user attempts to authenticate against.
This user may be locked out after one invalid attempt if the threshold is 3.

-- 
-James