Manage a list of LDAP attributes not to update.

The populate recipe can be configured to not update the attributes defined
by the list attribute ['ca_openldap']['populate']['attributes_to_ignore'].
This configuration is relevant when
['ca_openldap']['populate']['update_enable'] == true.
Document new attribute (attributes_to_ignore) in README.
Bump to version 0.4.0.