Rework dnNormalize/dnPretty to share LDAP_rewrite

Add flag to matching rules to indicate if DN folding is needed.
Don't specify dnPretty as pretty function for DN attribute types as
this works too well (it breaks tests).