openldap_access: Remove empty "access to" nodes when syncing by