[389-users] Hiding key fields from ldap searches