Ticket 47395 47397 v2 correct behaviour of account policy if only stateattr
	is configured or no alternate attr is configured

Bug Description:  The tickets relate to two specific configurations of
	the account policy plugin
	1] if createtimestamp is configured as stateattr it is treated like a
	   normal timstamp attribute and is updated, which should not happen.
	   As a side effect the account is not locked out based on the original
	   createtimestamp
	2] if no altstateattr is configured, always createtimestamp is used, but
	   the intention was to base account inactivation only on lastlogintime

Fix Description:   1] prevent update of createtimestamp, even if used as stateattr
		   2] if no altstateattr is configured still use the default, but
		      accept "1.1" as null value and check only stateattr

https://fedorahosted.org/389/ticket/47395
https://fedorahosted.org/389/ticket/47397

Reviewed by: ?
Ticket 47396 - crash on modrdn of tombstone

    Bug Description:  a client modrdn operation on a tombstone entry can crash the server

    Fix Description:   client modrdns and modifies on tombstone entries should not be
        accepted. Tombstones aer internally kept for eventual conflict resolution, normal
        clients should not touch them.
        an exception would be to force purging of tombstones or a kind of "undo" for
        a delete, which could resurrect a tombstone, but this is not in the scope of this ticket

    https://fedorahosted.org/389/ticket/47396

    Reviewed by: Rich, thanks
Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization

Bug Description:
	During online initialization of a replica encrypted attributes are not encrypted by the import.
	This is because the import job flag job->encrypt is not set.

Fix Description:
	The fix consist to add the config backend attribute "nsslapd-online-import-encrypt" that is by default set to "on".
	During online 'ldbm_back_wire_import' the config attribute is set into the pblock and set into the job->encrypt

https://bugzilla.redhat.com/show_bug.cgi?id=893178

Reviewed by: Rich Meggison (thanks Rich)

Platforms tested: fedora 17

Flag Day: no

Doc impact: no