add privileges support to ldapsam too