Update LDAP documentation.

It is possible to set olcPPolicyDefault to a non-existant value.

This means we can configure LDAP before importing data, which
means we don't need to mangle the value of pwdAttribute.

Change-Id: Ic2f3b8d1ee52dda24c3277bb6c6945f5ff4b83da