hash for additional ldap options

I added gr_ldap_options, a hash for additional LDAP options. They're currently applied in alphabetical order to prevent random changes between Puppet runs from hash order changing.