Fix /etc/default/slapd template to NOT use slapd.conf, give LDAP server ownership of cn=config-update.ldif