s4:objectclass_attrs LDB module - deny multi-valued replace requests