opattr on replicated entries.

exposes register_certificate_map_function(), as better to return an error
if a plugin is compiled to use it and slapd is not built with HAVE_TLS
than failing with an unresolved symbol

alternate X.509 peer normalization function

filterentry cleanup

(needs to be applied to other filter cases)

lots of cleanup; few improvements; fix RDN selection bug when creating connection dynamic entries; rework entries ordering - now it's more intuitive and regular; optimize counters update