openldap_access: support suffix=nil in augeas provider