s4:setup Mark 'cn' in secrets as case insensitive