syncrepl binding DN privileges?