ldap_mod correctly decides what to forward