ModulesConstraints tests all values of a multi-valued attributes

ModulesConstraints tests all values of a multi-valued attributes (instead of just the first one). Thus the following now works:

	ModulesConstraints = {
		Mail = {
			memberOf = "cn=aclSogoMail,ou=Groups,dc=example,dc=com";
		};
		Calendar = {
			memberOf = "cn=aclSogoCalendar,ou=Groups,dc=example,dc=com";
		};
	};

Assuming a user entry in LDAP looks like the following:

    dn: uid=bro,ou=Peolpe,dc=example,dc=com
    memberOf: cn=aclSsh,ou=Groups,dc=example,dc=com
    memberOf: cn=aclSogoCalendar,ou=Groups,dc=example,dc=com

... bro can only access the SOGo calendar, but not the mail module.