s3-waf: convert IDMAP_ADEX into a subsystem.