LDAP: avoid requesting unneeded attributes