slapo-memberof -> slapo-dynlist and value-based ACLs