Add objectClass shadowAccount in 3.0 migration to fix disabled accounts