Add a dereference option for ldap

This allows proper dereferencing of aliased objects in an LDAP tree.

Fixes Bug #1153786

Change-Id: Ia09a99b7bca1ab055eb0c6dfa34138beca15bff0
Merge "Add a dereference option for ldap"
Move trusts to extension

Change-Id: I32b32fc5df8d8483ae8e99067f0655c13c6f520b
Merge "Move trusts to extension"