needed.

if tool mode needs to add structuralObjectClass, override any database setting (rationale: if configured w/ mirror mode and syncrepl, a master is also a shadow, but we need to be able to slapadd to a master (possibly with the correct SID; will deal with this later)

add csnValidate/csnNormalize, since the SID could be hexadecimal, and we want upper/lowercase a-f to match as appropriate

network analyzer are likely to know which ones are or are not "great".

improve previous commit; fix ITS#5108 by letting both SID and RID be 0..4095, input/output in decimal, but consistently handled in hexadecimals within CSN