back-ldap redirect RootDSE? RWM re-encode attributes?