Do not use admin account to update ldap

For security reasons a service account with modify permissions should not
be used as an admin account. Only use read permissions for the admin
account and let users modify / delete their own account attributes.