Add support for LDAP assertions (rfc4528)

Add support for an optional argument for ldap_modify to use as assertion
for the modify command according to rfc4528.

Thanks to Stefan Kuhn for preliminary testing.