[ds] exclude paths containing directory server secrets

Signed-off-by: Bryn M. Reeves <bmr@redhat.com>
[ds] add 'certutil -L' collection for slapd instances

Signed-off-by: Bryn M. Reeves <bmr@redhat.com>
[ldap] add more forbidden paths and restrict file collection

Signed-off-by: Bryn M. Reeves <bmr@redhat.com>
[ldap] add output of 'certutil -L'

Signed-off-by: Bryn M. Reeves <bmr@redhat.com>