Allow to provided a root DN different from the domain #SEC-2071