Allowed arbitrary LDAP user attributes to be deleted by replacing
them with nothing.
Allowed LDAP shadow account attributes to be reset.