More efficient DN list for LDAP role delete

The search to get the DNs in RoleApi::delete would return all
attributes for the entry rather than just the DN.

This fix uses the special attribute name 1.1 to indicate that
no attributes should be included in the response.

Change-Id: Ifac101cb1e145050ee9a517c47b6bd4fea99ffa5