ldap options hash needs to be sorted to prevent spurious puppet changes