move certs, key to right dir
add openldap user for access /etc/ssl/
change to 256
set localSSF, change global sec
change CA path
add olcSec for specific db
auto add bfs tree