[WFLY-490] / [WFLY-455] Rework the LDAP authorization resource definitions to be task based, to split username searches from group searches and also to allow the definition of iterative searches.