[Issue 10557] slapo-chain installs an attacker-authored referral DN into a privileged operation on the trusted server