some equals are more equal than other equals
LDAP Wizard: don't generate filter when not allowed