attribute with value 'false' always negates result of LDAP access_check
Formatting
Use the map functions to parse VALUE_PAIR string tuples
Process attribute maps if we just have a generic attribute set