core: don't follow referrals in externalldap