Set 'acl allow execute always = true' as the default

- make it an option in the gui
- reproduces samba3 behavior
- give max open files breathing room

Ticket: #4714
Set the ldap password *after* a smb4.conf has been generated