minor cleanup
revert Other Operations change from 09
filled in IANA considerations (no longer TBD)
Reference RFC4520, not 3383 (obsolete)

Do not use ber_<first/next>_element(), which have no error return.

note about OpenSSL being more liberal than OpenLDAP when there is garbage past the end of a certificateList

assume some external process will tell us when network is on/offline

loop saving malloced data is run at least once.