config OC, thus inaccessible from cn=config

home page instead of bundling the full code

add support for allowedChildClasses, allowedChildClassesEffective: the former basically consists of all structural objectClasses, the latter is identical if the user can write 'children', absent otherwise