feature #1741: escape dn in X509CloudAuth.rb
feature #1741: add method each_with_xpath to object pools
feature #1741: filter possible user matches using xpath