API for handling LDAP-style filters