2) attribute aliasing support
- x509CertificateIssuer
- x509CertificateSerial
- x509CertificateIssuerAndIssuer
3) AuthorityKeyIdentifier support(one of certificate extension)
4) Misc. improvement
- integrate OID and its decoder mapping table
- normalize and validate the values of both component asserions and
  extracted components
5) Misc. bug fix

Stop consumer, then restart after more mods are done to master.

an old entry that must be deleted.

improve usability of global ovrlays for write operations; may need to anticipate SLAPI accordingly.  More work needed for add (overlays need to understand they're global and call slap_mods2entry() explicitly)

work out an issue with chk_referrals and back-relay/rwm; this looks like the best compromise; minor cleanup