Update schema requirements

update access_provider match : permit is allowed (see man)
update ldap_access_filter : we can write a custom access_filter (see man)