rest: Use LDAP_SCOPE_BASE in by_dn search

It appears that with LDAP_SCOPE_SUBTREE it will always fetch the full
tree with children. This was especially bad in organisation searches
since it did fetch the full database...