o.c.security: Update preference.ini comments, remove warnings.

URL setting can list multiple URLs, make example settings match LDAP
example setup.
Merge remote-tracking branch 'origin/3.2.x' into 3.2.x