config evolution with openldap 2.3 and beyond?