Access to cn=monitor from read-only ldap