Add documentation on ACL requirements for psuedo-attribute entryDN Also fix up the example for replacing the memberOf overlay