SEC-2071: Allow to provide a root DN different from the domain