[evol] move all activeldap workarounds away, and properly manage operational attributes (using schema instead of a hardcoded list)