scim-ln: add --meta option, don't copy metadata unless superuser by default