Refactor to carry the eldap connection handle in state & allow for scoped LDAP searches

- Carry the eldap connection handle in state, will connect upon first use and close upon terminate
- Remove passing the ldap connection handle around since state is passed around
- Add scope to the configuration to allow for subtree searches. Since you do not know the bind DN on a sub-tree search until you search for, it, bind anonymously, search for the DN, then bind with the DN and password.
- make test matches current tip version in pass/failures