Limit which operators can be used with LDAP group comparison

and other minor cleanups
Debug condition is now a fr_cond_t
Cleanup EAP-SIM macros
Remove useless extern declarations