Fixes #3250: split LDAPConnection into RW/RO