fabfile: add separate ldappasswd target